September 17, 2025, 1:13 pm | Read time: 2 minutes
Since the beginning of the week, a major update full of new features and the fresh “Liquid Glass” look is available for current iPhone models with iOS 26. However, Apple hasn’t forgotten older devices, as evidenced by three updates released simultaneously: iOS 18.7, 16.7.12, and 15.8.5.
TECHBOOK has already reported extensively on the security content in iOS 18.7. The update includes several patches for iPhone XS, XS Max, and XR that no longer receive iOS 26. But users who want to wait a bit before jumping to the completely new iOS version are at least on the safe side with 18.7.
iPhone 6s from 2015 Receives Another Update with iOS 15.8.5
iOS 16.7.12 and iOS 15.8.5, on the other hand, address a specific security vulnerability. Apple had already eliminated this issue on August 20 with iOS 18.6.2 for current iPhone models. Now, older iPhones also receive protection against the vulnerability—including the ten-year-old iPhone 6s.
Apple security researchers have found a so-called out-of-bounds write error in Image I/O frameworks—a core technology for loading images. This is a memory error where attackers can write data outside the intended memory area through manipulated inputs. It can lead to crashes, data corruption, or even the execution of malicious code.
Regarding the impact of the vulnerability (ID CVE-2025-43300), the company writes on its support page: “Apple is aware of a report that this issue may have been exploited in a highly sophisticated attack on certain individuals.”
Why Apple Is Releasing iOS 18.7.1 Now and Who Should Install It
iOS 26.0.1 Is Here–What’s in the iPhone Update
Should You Install the Update Immediately?
Since, according to Apple, several people have already fallen victim to attacks through this vulnerability, TECHBOOK recommends installing the security updates immediately:
- iOS 16.7.12 for iPhone 8, iPhone 8 Plus, iPhone X (as well as iOS 16.7.12 for iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation).
- iOS 15.8.5 for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation) as well as iPadOS 15.8.5 for iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).
Connection to WhatsApp Security Vulnerability
At the end of August, WhatsApp closed its own zero-click security vulnerability (CVE-2025-55177) in its iOS and macOS clients. This vulnerability was used in combination with the CVE-2025-43300 vulnerability in targeted spyware attacks.
Samsung was also affected: The company patched a vulnerability last week that hackers exploited in combination with the WhatsApp vulnerability against Android devices.